Administration of Identity Management Realms

This section describes the various administrative tasks that you can perform with respect to identity management realms. It contains these topics:

• Customizing an Existing Identity Management Realm

• Creating Additional Identity Management Realms

Customizing an Existing Identity Management Realm

Once a realm is created, you can further customize various aspects of it. Table 19-2 lists the aspects you can customize, the tools available for each type of customization, and where to look for more information.

Table 19-2  Customizing an Existing Realm

What You Can Customize	Tools	Information
Directory structure and naming policies	Oracle Delegated Administration Services Oracle Directory Manager Command-line tools	"Planning the Directory Information Tree for Identity Management" "Using the Oracle Internet Directory Self-Service Console"
Authentication policies	Oracle Directory Manager Command-line tools	Chapter 15, "Password Policies in Oracle Internet Directory"
Identity management authorizations	Oracle Delegated Administration Services Oracle Directory Manager Command-line tools	Chapter 17, "Delegation of Privileges for an Oracle Technology Deployment" "Using the Oracle Internet Directory Self-Service Console"

Note: Be sure to complete all of the customizations before installing any Oracle component that uses the realm. Changing the properties of a realm after an Oracle component has been deployed can result in unpredictable behavior.

See Also: If you are integrating with Oracle Application Server Single Sign-On, the section "Updating the Single Sign-On Server with Directory Changes" in the Oracle Application Server Single Sign-On Administrator's Guide

Creating Additional Identity Management Realms

You can create additional identity management realms by using the Oracle Internet Directory Self-Service Console.

Note: Not all applications can work with multiple identity management realms Whenever you add an additional realm, you may need to make existing applications aware of it by using a manual procedure. For more information, see the application-specific documentation. In the Oracle Identity Management infrastructure, the single sign-on server needs to be made aware of an additional realm by using a special administrative procedure. Please refer to the chapter "Single Sign-On in Multiple Realms" in the Oracle Application Server Single Sign-On Administrator's Guide for instructions on enabling multiple realms in Oracle Application Server Single Sign-On.

See Also: "Creating an Additional Identity Management Realm by Using the Oracle Internet Directory Self-Service Console"